An organization does not have software or hardware asset tracking in place, has little governance over data and access controls, and does not centrally manage assets.
You need to implement a solution, process, or program to assess the current state of the infrastructure for the organization. The solution must meet the following requirements:
Be a recognized program, guide, model, methodology, or standard

Be specific to IT

Include more than just IT software/hardware

What should you use?